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IN THE CLAIMS 

The claims are amended as follows: 

1. (Currently Amended) A method, comprising: 
sending an access-request signal comprising a well- 
known uniform resource locator to a network by a terminal 
for connecting to a help-portal server of said network and 
for requesting a provisioning signal or a management 
session signal for configuring the terminal; 

receiving by the terminal, in response to said sending 
the access-request signal, an identity of said help-portal 
server using a chain of trust comprising at least two 
consecutive exchanges of information between trusted 
elements of the network and the terminal; and 

sending re -sending , in response to said identifying, 
a request signal to the help-portal server by the terminal 
with a request to provide the provisioning signal or the 
management session signal to the terminal, wherein, after 
being configured using the provisioning signal or the 
management session signal, the terminal is enabled for 
handling data-protocol services and dynamically configured 
for the data-protocol services specific to a service 
provider in a secure way based on said chain of trust so as 
to be able to connect said terminal to an IP backbone 
network via a network, which provides said data-protocol 
services and which is provided by said service provider. 

2. (Original) The method of claim 1, wherein said data- 
protocol services specific to said service provider are 
provided by a general packet radio service. 
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3. (Previously Presented) The method of claim 1, wherein 
the access-request signal is sent by a browser user agent 
block of the terminal. 

4. (Previously Presented) The method of claim 1, wherein 
the well-known uniform resource locator is allowed by an 
access control profile of the terminal. 

5. (Previously Presented) The method of claim 1, further 
comprising: 

sending the provisioning signal or the management 
session signal to the terminal for configuring the 
terminal . 

6. (Previously Presented) The method of claim 5, wherein 
the provisioning signal is sent over an IP bearer or sent 
using a short message service protocol. 

7. (Previously Presented) The method of claim 6, wherein 
said provisioning signal is sent over the IP bearer using a 
hyper text transfer protocol or a hyper text transfer 
protocol secure. 

8. (Previously Presented) The method of claim 6, wherein 
said provisioning signal is sent over the air. 

9. (Previously Presented) The method of claim 1, wherein 
s identifying said help-portal server comprises: 

identifying to the terminal a trusted access point 
node name by a trusted home location register of the 
network; 
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re-sending the access -request signal to the trusted 
access point node by the terminal; 

identifying to the terminal a trusted domain name 
service server of the network by the trusted access point 
node ; 

re-sending said access-request signal by the terminal 
to the trusted domain name service server for identifying 
an address mapping for the help -portal server; and 

identifying said address mapping to the terminal by 
the trusted domain name service server. 

10. (Previously Presented) The method as in claim 9, 
wherein a security of configuring the terminal is ensured 
by means of the chain of trust built by the trusted home 
location register, by the well-known access point node name 
for accessing the trusted access point node, by the trusted 
access point node, by the trusted domain name service 
server and by the well-known uniform resource locator. 

11. (Previously Presented) The method of claim 1, wherein 
after said sending the request signal to the help-portal 
server, the method further comprises: 

sending a user authentication request signal to an 
authentication block of the network or to the terminal or 
to both, the authentication block and the terminal, 
respectively, by the help-portal server, and a receiving 
authentication confirmation signal back from the 
authentication block or from the terminal, respectively, or 
from both, the authentication block and the terminal; and 
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determining if the terminal is authentic by the help- 
portal server based on the authentication confirmation 
signals . 

12. (Previously Presented) The method of claim 1, 
wherein said access-request signal contains user 
identification information, a generic uniform resource 
locator request for the help-portal server or for the help- 
portal server and a device management server, and a well- 
known access point node name for accessing the trusted 
access point node or a wildcard access point node. 

13. (Previously Presented) The method of claim 11, wherein 
if it is determined that the terminal is authentic, the 
method further comprises: 

sending a triggering signal to a provisioning server 
by the help-portal server; and 

sending a provisioning signal by the provisioning 
server to the terminal and so configuring said terminal. 

14. (Cancelled) 

15. (Previously Presented) The method of claim 11, 
wherein if it is determined that the terminal is authentic, 
the method further comprises the: 

sending an initial provisioning triggering signal to a 
device management server for initial provisioning; and 
sending a further triggering signal by the help- 
portal server to an initialization content handler of the 
terminal, said further triggering signal containing a 
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proxy address and a password for connecting to the device 
management server . 

16. (Previously Presented) The method of claim 15, 
further comprising: 

determining if the further triggering signal contains 
an instruction of making a connection to the device 
management server by the terminal . 

17. (Previously Presented) The method of claim 16, 
wherein if the further triggering signal contains the 
instruction for making the connection to the device 
management server by the terminal, the method further 
comprises : 

sending a start signal to a device management agent 
block of the terminal by the initialization content 
handler block; 

sending a further access-request signal containing a 
network access authentication to the device development 
server by the device management agent block; and 

sending the management session signal by the device 
development server to the terminal for further configuring 
the terminal. 

18. (Previously Presented) The method of claim 1, wherein 
before sending the access -request signal to the network, 
the method further comprises : 

starting a browser user agent by a starting signal. 

19. (Currently Amended) A cellular communication system, 
comprising: 
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a terminal, enabled for handling data-protocol 
services and dynamically configured for the data-protocol 
services specific to a service provider in a secure way 
based on a chain of trust, responsive to a provisioning 
signal or to a management session signal for configuring 
the terminal, for providing sending an access-request 
signal comprising a well-known uniform resource locator for 
connecting to a help-portal server, for pending re -sending , 
in response to identifying said help-portal server, a 
request signal to the help-portal server with a request to 
provide the provisioning signal or the management session 
signal to the terminal; and 

a network provided by said service provider and 
comprising said help-portal server, responsive to the 
access-request signal, for providing the data-protocol 
services specific to the service provider, for said 
identifying, in response to said sending the access-request 
signal, said help-portal server to said terminal using said 
chain of trust comprising at least two consecutive 
exchanges of information between trusted elements of the 
network and the terminal, for providing the provisioning 
signal or the management session signal to the terminal to 
perform said configuring and for enabling after said 
configuring a connection of said terminal to an IP 
backbone network via the network. 

20. (Previously Presented) The cellular communication 
system of claim 19, wherein the well-known uniform resource 
locator is allowed by an access control profile of the 
terminal . 
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21. (Previously Presented) The cellular communication 
system of claim 19, wherein said data-protocol services 
specific to said service provider are provided by a general 
packet radio service. 

22. (Previously Presented) The cellular communication 
system of claim 19, wherein the terminal comprises: 

a browser user agent block, responsive to a starting 
signal , for providing the access -request signal to the 
network . 

23. (Previously Presented) The cellular communication 
system of claim 19, wherein said help-portal server of said 
network is responsive to the request signal and to one or 
both authentication confirmation signals, for providing a 
triggering signal, or an initial provisioning triggering 
signal and a further triggering signal; said network 
further comprises: 

a trusted domain name service server, responsive to 
the access-request signal from the terminal, for 
identifying to the terminal an address mapping for the 
help-portal server; 

a trusted access point node, responsive to the access- 
request signal, for providing to the terminal the trusted 
domain name service server; 

a trusted home location register, responsive to the 
access-request signal, for providing the trusted access 
point node to the terminal; and optionally 

an authentication block, responsive to an 
authentication request signal, for providing the one 



8 



944-004.042 
Serial No. 10/757,560 

authentication confirmation signal to the help-portal 
server. 

24. (Previously Presented) The cellular communication 
system of claim 23, wherein a security of configuring the 
terminal is ensured by means of the chain of trust built by 
the trusted home location register, by the well-known 
access point node name for accessing the trusted access 
point node, and further built by the trusted access point 
node, by the trusted domain name service server and by the 
well-known uniform resource locator. 

25. (Previously Presented) The cellular communication 
system of claim 19, wherein said access-request signal 
contains user identification information, a generic uniform 
resource locator request for the help-portal server or for 
the help-portal server and a device management server, and 
a well-known access point node name for accessing the 
trusted access point node or a wildcard access point node. 

26. (Previously Presented) The cellular communication 
system of claim 23, wherein the network further comprises: 

a provisioning server, responsive to the triggering 
signal by the help-portal server, for providing the 
provisioning signal to the terminal. 

27 (Cancelled) 

28. (Previously Presented) The cellular communication 
system of claim 23, wherein the network further comprises: 
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a device management server, responsive to said initial 
provisioning signal, to a further access-request signal 
containing a network access authentication provided by the 
terminal in response to said further triggering signal, for 
providing the management session signal to the terminal 
for configuring the terminal. 

29. (Previously Presented) The cellular communication 
system of claim 28, wherein the terminal further comprises: 

an initialization content handler, responsive to the 
further triggering signal containing a proxy address and a 
password for connecting to the device management server, 
for providing a start signal; and 

a device management agent block, responsive to the 
start signal, for providing the further access-request 
signal . 

30. (Previously Presented) The cellular communication 
system of claim 19, wherein the provisioning signal is 
sent over an IP bearer or sent using a short message 
service protocol. 

31. (Previously Presented) The cellular communication 
system of claim 30, wherein said provisioning signal is 
sent over the IP bearer using a hyper text transfer 
protocol or a hyper text transfer protocol secure. 

32. (Previously Presented) The cellular communication 
system of claim 30, wherein said provisioning signal is 
sent over the air. 
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33. (Currently Amended) A computer program product 
comprising: a computer readable storage structure embodying 
a computer program code thereon for execution by a computer 
processor with said computer program code wherein said 
computer program code comprises instructions for performing 
the method of claim 1, indicated as being performed by a 
terminal or by a network or by both the terminal and the 
network . 

34. (Cancelled) 

35. (Cancelled) 

36. (Currently Amended) A terminal, comprising: 

a browser user agent block, for providing sending an 
access-request signal comprising a well-known uniform 
resource locator to a network for connecting to a help- 
portal server of said network, for pending re -sending , in 
response to identifying said help-portal server, a request 
signal to the help-portal server with a request to provide 
the provisioning signal or the management session signal to 
the terminal, 

wherein said terminal is configured to receive an 
identity of said help-portal server using a chain of trust 
comprising at least two consecutive exchanges of 
information between trusted elements of the network and the 
the browser user agent block, and 

wherein, after being configured using the provisioning 
signal or the management session signal, the terminal is 
enabled for handling data-protocol services and dynamically 
configured for the data-protocol services specific to a 
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service provider in a secure way based on said chain of 
trust so as to be able to connect said terminal to an IP 
backbone network via a network, which is configured to 
provide said data-protocol services and which is provided 
by said service provider. 

37. (Previously Presented) The terminal of claim 36, 
wherein said data-protocol services specific to said 
service provider are provided by a general packet radio 
service . 

38. (Previously Presented) A network, comprising: 

a help-portal server, for providing the data-protocol 
services specific to a service provider, responsive to the 
request signal from a terminal for providing the 
provisioning signal or the management session signal to the 
terminal to perform configuring of said terminal and for 
enabling after said configuring a connection of said 
terminal to an IP backbone network via the network, which 
is configured to provide said data-protocol services and 
which is provided by said service provider, 

wherein, in response to an access-request signal 
comprising a well-known uniform resource locator for 
connecting to said help-portal server from a terminal, the 
network is configured to identify said help-portal server 
to said terminal using a chain of trust comprising at least 
two consecutive exchanges of information between trusted 
elements of the network and the terminal. 
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39. (Currently Amended) The network of claim 38, wherein 
said trusted elements of the network network elements 
comprise : 

a trusted home location register, responsive to the 
access-request signal, for providing the trusted access 
point node to the terminal, 

a trusted access point node, responsive to the access- 
request signal, for providing to the terminal the trusted 
domain name service server; 

a trusted domain name service server, responsive to 
the access-request signal from the terminal, for 
identifying to the terminal an address mapping for the 
help-portal server. 

40. (Previously Presented) The network of claim 38, 
wherein the help-portal server is configured to provide an 
authentication request signal, and said network further 
comprises : 

an authentication block, responsive to said 
authentication request signal, for providing an 
authentication confirmation signal to the help-portal 
server. 

41. (Previously Presented) The network of claim 38, 
wherein the help-portal server is configured to provide a 
triggering signal in response to said request signal, and 
said network comprises : 

a provisioning server, responsive to the triggering 
signal by the help-portal server, for providing the 
provisioning signal to the terminal. 
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